AI Technologies and Controls
AAISM · 76 questions
- A city needs secure access patterns for permitting and 311 assistants. Which architecture decision best fits AI security design?
- Public-health leadership plans to add an AI inference tier that processes clinic summaries. How should security advise integrating it into enterprise architecture?
- A transit authority wants operations analysts to call model endpoints used for schedule and ridership insights. Which architecture pattern best hardens that access?
- Courts IT is designing a legal-research assistant for clerks. Which design choice best layers AI-specific security into the solution?
- A housing authority is building a case-triage model. Which architecture decision best strengthens AI security?
- Emergency management needs EOC packet summarization that still works if cloud AI becomes unreachable. Which architecture approach best fits?
- A water utility wants analytics AI near OT historian data. Which protective design pattern should security require?
- A school district is designing an agent that can call student information system APIs. Which architecture control is most appropriate?
- Library digital services want AI help summarizing catalog FAQs without exposing cardholder PII to training. Which architecture pattern best reduces that exposure?
- An assessor’s office is deploying vector search over parcel documents. How should crypto architecture be handled?
- Parks wants multimodal trail-photo AI exposed through APIs. Which architecture approach best keeps controls consistent?
- Fire/EMS is reviewing a CAD AI that reads AVL locations and radio transcripts. What should the architecture review emphasize first?
- County IT reviews a proposed civic web app that calls a vendor LLM. Which finding is the clearest architecture anti-pattern?
- Permitting wants AI to draft plan-review comments. Which architectural control best keeps those drafts from becoming official without oversight?
- City security is reviewing a RAG design for internal policy assistants. Which requirement best protects document confidentiality?
- Elections officials want a ballot-help assistant. Which architecture decision best isolates that high-sensitivity workload?
- A city is choosing a model for code-enforcement FAQs. Which selection approach best fits AI lifecycle security management?
- Public-health has fine-tuned an outbreak summarizer. What validation step should occur before go-live?
- Transit is setting acceptance criteria for an on-time prediction model. What should validation emphasize beyond raw accuracy?
- Courts ML engineers note that training on sealed records would raise summarizer accuracy. What lifecycle decision is most appropriate?
- A housing authority trains a case-triage classifier. Which lifecycle practice best supports reproducibility and auditability?
- Emergency management changes its incident taxonomy used by an alert-drafting model. What lifecycle action should follow?
- A water utility has scarce labeled leak examples for a detection model. Which development approach best fits lifecycle judgment?
- A school district MLOps pipeline promotes classroom models toward production. Which gate belongs in that lifecycle?
- A library evaluates quantizing an on-prem summarizer to run on smaller hardware. What lifecycle consideration matters most for security posture?
- An assessor’s office plans to replace a production valuation helper with a newer model. Which practice best controls that change?
- Parks evaluation shows a trail-recommendation model favors some park districts over others. What lifecycle action best fits AI security management?
- Fire/EMS is validating a CAD assistant that reads noisy radio transcripts. Which validation requirement best strengthens operational AI assurance?
- County IT supports an internal RAG app through design, build, and release. How should security advice be applied across that AI development lifecycle?
- Permitting plans to release a plan-check assistant. Which validation practice best fits consequential civic decisions?
- Elections approaches a pre-election blackout window. Which lifecycle change-control action best fits that civic calendar?
- A city stores RAG embeddings of resident complaints for a 311 assistant. Which data management control best protects that corpus?
- Public-health is building a triage-model training extract. Which data management practice best treats AI lifecycle data risk?
- Transit wants AI analytics on operations logs that include badge identifiers. What data control should management require first?
- Courts IT is preparing fine-tuning buckets for a legal summarizer. Which data management control best enforces training-data boundaries?
- A housing authority needs case narratives for quality evaluation of a summarizer. Which data control best enables safer evaluation?
- Emergency management feeds geospatial layers into an AI damage-assessment tool. Which data management control best protects integrity?
- A water utility builds an AI feature store mixing customer and sensor data. Which design best fits data management controls?
- School-district staff might paste student IEP free text into unsanctioned AI tools. Which preventive data control best fits?
- A library indexes local-history scans for AI retrieval. Which data management practice best enables correct access decisions?
- An assessor’s office hosts parcel documents in a cloud vector database. Which cryptographic data control best fits management expectations?
- Parks generates synthetic training images of facilities for a vision model. Which data control best supports provenance?
- Fire/EMS trains a response-time predictor on operational datasets. Which data management practice best supports high-stakes civic AI?
- County IT archives prompts and responses from a resident-services assistant. How should that AI interaction data be managed?
- Permitting plans AI fraud scoring that would otherwise use contractor SSNs. Which data management control best fits before feature engineering?
- 311 quality finds tainted uploads in a knowledge base used by a resident assistant. What data management action should occur?
- A city AI may recommend denial of resident benefits. Which trust and safety control best fits that consequence?
- Public-health AI flags clinics for extra inspection. Which privacy, ethics, and trust control should management demand?
- Transit AI influences service-frequency proposals across neighborhoods. Which trust control best addresses ethical performance?
- Courts evaluate an AI feature that would profile litigants beyond operational need. What privacy-by-design response is most appropriate?
- A housing authority uses generative AI to draft tenant notices. Which trust and safety control best fits outbound civic communications?
- Emergency management drafts resident alerts with generative AI. Which transparency control best fits those civic communications?
- A water utility ethics review evaluates an AI that would prioritize leak fixes solely by property tax value. What should the review conclude?
- A school district plans classroom agents that process student work samples. Which privacy control best fits that use?
- A library chatbot helps with reference questions. Which privacy control best fits those conversational sessions?
- An assessor’s office uses vision AI on parcel photos. Which trust and safety practice best strengthens robustness?
- Parks and recreation wants an AI to post autonomously to social channels. What safety gating best fits before that goes live?
- Fire/EMS uses AI for protocol suggestions. Which oversight control best fits low-confidence outputs?
- A county plans a new resident-facing AI portal. Which privacy control best fits before launch?
- A permitting ethics board oversees AI-assisted findings on applications. Which accountability control best fits contested outcomes?
- Elections officials review a city-operated AI demo that could use voice clones. Which trust and safety rule best fits?
- A city operates a municipal LLM gateway. Which monitoring practice best fits security telemetry?
- Public-health leadership manages residual risk for clinical AI helpers. Which security control practice best fits ongoing assurance?
- Transit ops assistants use generative AI. Which logging practice best supports security monitoring without overexposure?
- A court AI retrieval system can pull from case repositories. Which detection control best fits unauthorized data access?
- A housing authority exposes a tenant chatbot API. Which preventive control best fits that endpoint?
- Emergency management tracks AI alert-draft quality. Which monitoring approach best treats integrity as security-relevant?
- A water utility depends on a vendor-hosted model that updates without notice. Which monitoring practice best detects silent behavior change?
- A school district monitors classroom agents for policy violations. Which automated response best fits repeated breaches?
- A library offers public AI search. Which monitoring signal best indicates scraping abuse?
- An assessor’s office feeds features into a valuation model. Which security control best protects that pipeline?
- Parks and recreation promotes chatbot builds through CI. Which security practice best fits that delivery pipeline?
- Fire/EMS administrators can change model settings from admin consoles. Which access control best fits that privilege?
- County clerks use AI productivity tools. Which monitoring practice best ties identity risk to AI use?
- Permitting operates a prompt firewall. Which monitoring practice best measures that control’s performance?
- 311 operations want anomaly detection on civic AI prompts. Which monitoring foundation best enables that detection?